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WORM DETECTION RESULT 
—SCAN METHOD: SYN PACKET 
—SCAN ORIGIN IP ADDRESS: 192.10.1.14 

—MOST FREQUENTLY TARGETTED DESTINATION PORT NUMBER: 80 



THERE IS A POSSIBILITY OF INVASION FROM OUTSIDE BYWORM 
THAT TARGETS VULNERABILITY OF Web SERVICE. 
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WORM DETECTION RESULT 
—SCAN METHOD: SYN PACKET 
-►SCAN RATE: 10 scan/sec 
—NUMBER OF COMPUTERS INFECTED: 1 
—NAME OF COMPUTER INFECTED: lemon 
—IP ADDRESS OF COMPUTER INFECTED: 192.10.3.5 
—MOST FREQUENTLY TARGETTED DESTINATION PORT NUMBER: 80 



Web SERVER INSIDE SEGMENT MAY HAVE BEEN INFECTED. 
SCAN FEATURES RESEMBLE TO THOSE OF Blaster WORM. 
NETWORK 192.10.4.0/24 SCANNED 
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90 



WORM DETECTION RESULT 
—SCAN METHOD: SYN PACKET 
—SCAN RATE: 10 scan/sec 
—NUMBER OF COMPUTERS INFECTED: 1—2 
—NAME OF COMPUTER INFECTED: lemon.apple 
—IP ADDRESS OF COMPUTER INFECTED: 1 92.1 0.2.5,1 92.1 0.2.1 1 
—MOST FREQUENTLY TARGETTED DESTINATION PORT NUMBER: 80 

Web SERVER INSIDE SEGMENT MAY HAVE BEEN INFECTED. 
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